Deployment with Kandji

This guide will cover the necessary steps to deploy the SenseOn Universal Sensor to macOS devices using Kandji.

Full Disk Access

The SenseOn Endpoint agent requires Full Disk Access to operate. To give the agent full disk access we need to:

Download the file named: SEE-FDA.mobileconfig. Click here to download SEE-FDA.mobileconfig and follow the following steps.

1. Login to Kandji and navigate to Library > Add New
2. Click Custom profile and click “Add & Configure”
3. Give the Profile a name such as “SenseOn Full Disk Access”
4. Select the Blueprint(s) you want to deploy to.
5. Under Device families select only “Mac”
6. Upload the SEE-FDA.mobileconfig file
7. Click Save

Add Package to Kandji

1. Download the latest .pkg file and senseon_install.txt file from the SenseOn Platform from Settings > Endpoint Agent Software
2. Login to Kandji and navigate to Library > Add New
3. Select Custom Apps and click “Add & Configure”
4. Give the Profile a name such as “SenseOn Agent Version X”
5. Select the Blueprint(s) you want to deploy to
6. Add any rules you require (e.g. Chip type set to Apple Silicon)
7. Set the Installation to “Install once per device”
8. Select the “Installer Package” radio button
9. Click “Add Preinstall Script“
10. Paste the in script below and replace the second line with the contents of the senseon_install.txt file downloaded earlier

    cat > /tmp/senseon_install.txt << 'EOF'
    <PASTE CONTENTS OF install_key.txt HERE>
    EOF
    

Verify Rollout

Alerting can be put in place to check if the agent is deployed to devices and to check the status of those that have it installed.

1. Login to Kandji and navigate to Library > Add New
2. Select Custom Scripts and click “Add & Configure”
3. Give the Profile a name such as “Check SEE status”
4. Select the Blueprint(s) you want to deploy to
5. Set the Execution Frequency to match your needs. (E.g. Run Daily)
6. Add the script below into the Audit Script Box

   sudo /usr/local/bin/seectl status
   

7. Click Save